CVE-2026-47151

High

Description

In EmberZNet v9.0.2 and earlier, malformed ClearWeekdaySchedule messages can trigger out-of-bounds writes into Door Lock schedule state. The size and location of this data is limited. These messages must come from a device that has already joined the network. Only devices supporting the Door Lock cluster may be impacted.

SeverityHigh
CVSS7.1
Exploit probability—
ProductSilabs Emberznet
PublishedJun 25, 2026
First seenJun 25, 2026

How to fix

Affected products

ProductAffected versionsFixed in
silabs emberznetv ≤ 9.0.2—

Check your version

Choose the product and enter the version you run to see whether it falls in the affected range.

In the Intelligence 360 plan

Attack Surface Management

See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.